Notice: My personal stance on AI generated artwork. Retweet and share if you agree. Let us discuss, and not immediately scream bloody murder.

Now Viewing: Securi SiteCheck report
Keep it civil, do not flame or bait other users. If you notice anything illegal or inappropriate being discussed, contact an administrator or moderator.

Double44 - Group: Member - Total Posts: 15
user_avatar
Securi SiteCheck report
Posted on: 06/05/14 01:55AM

I've experienced malvertising when browsing Gelbooru on my Android, but never experienced this on PC, though it might be thanks to Adblock.. sorry Gelbooru :(

Below is a scan i did on sitecheck.sucuri.net
imgur.com/iwjvxLK
imgur.com/uc3lVOY
imgur.com/jAkHsCg





jedi1357 - Group: Moderator - Total Posts: 5782
user_avatar
Posted on: 06/05/14 10:47AM

Double44 said:
I've experienced malvertising when browsing Gelbooru on my Android, but never experienced this on PC, though it might be thanks to Adblock.. sorry Gelbooru :(

Below is a scan i did on sitecheck.sucuri.net
imgur.com/iwjvxLK
imgur.com/uc3lVOY
imgur.com/jAkHsCg




It just looks like McAfee blocked us because we aren't using a recognized firewall. Everyone else says we're clean. Advertising is handled by an outside company anyway. I guess I can draw loser's attention to this when he wakes up but there's probably not much we can do.

Can you give us a screenshot of the "malvertising" itself? If we can identify it we can block it. The more info, the better.



Double44 - Group: Member - Total Posts: 15
user_avatar
Posted on: 06/05/14 11:10AM

Not interested in recreating the scenario for obvious reasons, but I remember a lot. Upon visiting Gelbooru for the first time on my Android, a new tab automatically opened itself and redirected to allmobiletracking.info, where a fake antivirus pretended to install a free version of itself and "scan" system folders.. creepy.

This was likely a popup, but it was a popup that appeared every time I opened Chrome (not Gelbooru) from that point forward.



jedi1357 - Group: Moderator - Total Posts: 5782
user_avatar
Posted on: 06/05/14 11:28AM

I looked it up. It's not us. This is an Android virus! Hackers piggyback this on text messages taking advantage of holes in the phone's security. If you received any TMs with advertising in it than this could have been how you got it. (Even if you didn't read it.)

The only advice I saw was to go to the Android main app store and get a reputable antivirus program for your phone.

(Edit: This is why I don't like smartphones. Nobody's going to hack my Radio Shack land line phone.)



lozertuser - Group: The Fake Administrator - Total Posts: 2233
user_avatar
Posted on: 06/05/14 01:17PM

Double44 said:
Not interested in recreating the scenario for obvious reasons, but I remember a lot. Upon visiting Gelbooru for the first time on my Android, a new tab automatically opened itself and redirected to allmobiletracking.info, where a fake antivirus pretended to install a free version of itself and "scan" system folders.. creepy.

This was likely a popup, but it was a popup that appeared every time I opened Chrome (not Gelbooru) from that point forward.


Was this recent? (past 10 days?)



Double44 - Group: Member - Total Posts: 15
user_avatar
Posted on: 06/13/14 06:28AM

jedi1357 said:
I looked it up. It's not us. This is an Android virus! Hackers piggyback this on text messages taking advantage of holes in the phone's security. If you received any TMs with advertising in it than this could have been how you got it. (Even if you didn't read it.)

The only advice I saw was to go to the Android main app store and get a reputable antivirus program for your phone.

(Edit: This is why I don't like smartphones. Nobody's going to hack my Radio Shack land line phone.)

I am certain "it" came from visiting Gelbooru. I was surfing the site without an adblocker, because as far as I know, there has been no adblocker available for Android. And while I did not have an antivirus installed, I didn't think I needed one to browse Gelbooru. I don't typically browse internet on Android, but at the time I needed a good wank.. and that mess happened XD


lozertuser said:
Double44 said:
Not interested in recreating the scenario for obvious reasons, but I remember a lot. Upon visiting Gelbooru for the first time on my Android, a new tab automatically opened itself and redirected to allmobiletracking.info, where a fake antivirus pretended to install a free version of itself and "scan" system folders.. creepy.

This was likely a popup, but it was a popup that appeared every time I opened Chrome (not Gelbooru) from that point forward.


Was this recent? (past 10 days?)

No, this happened about 4-5 months ago.



Deusexcalamus - Group: Moderator - Total Posts: 1169
user_avatar
Posted on: 06/13/14 09:26AM




Anti_Gendou - Group: Moderator - Total Posts: 4372
user_avatar
Posted on: 06/13/14 10:11AM

Virus protection or at least something to stave off any malware is advised for all websites.

Even children's websites, Youtube, and Facebook, etc have all transferred some kind of malware to... possibly everyone that has ever been to them.

If not directly, then by adverts or other site weakness.



Some sites are more secure than others. Like Gov sites and bank sites. But they may still have adware and spyware in mind for you.



add_replyAdd Reply


1